Cyber Strategy Sr Consultant

Introduction

A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe.

You'll work with visionaries across multiple industries to improve their cybersecurity, hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including Software and Red Hat.

Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you'll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in groundbreaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.

Your role and responsibilities

• Design, implement and manage cybersecurity governance activities, i.e. metrics KPIs / KRIs, policies, reports, agreement minutes and awareness campaigns.
• Design, implement and manage cybersecurity risk activities, profiling scenarios, analyzing likelihood and impact, measuring inherent and residual risks and defining treatment plans.
• Design, implement and manage business continuity and recovery strategy of information and communication technologies based on ISO22301.
• Design, implement and manage cybersecurity compliance activities, attending internal and external audits on behalf of our clients, as well as assessing and recommending remediation of controls, based on ISO27001, NIST CSF, PCI DSS, SOX, Swift and/or GDPR.

Required technical and professional expertise

Hands-on experience in business continuity and recovery strategy of information and communication technologies based on ISO22301 or cybersecurity risk & compliance based on ISO27001, NIST CSF, PCI DSS, SOX, Swift and/or GDPR.

Education: Engineer or Bachelor’s degree in Information Technology & Security, Computer Sciences, Business Administration with a cybersecurity component or a related field.

Certification in ISO 22301 Business Continuity and Recovery Management or 27001 Implementer / Lead Auditor / Internal Auditor or equivalent.

Technical Skills:

• Advanced understanding of GRC principles, cybersecurity frameworks and regulatory compliance requirements (e.g. ISO27001, NIST CSF, PCI DSS, SOX, Swift and/or GDPR).
• Strong knowledge of governance, risk management frameworks (e.g. COSO ERM, ISO31000, FAIR) and regulatory compliance requirements.

Preferred technical and professional experience

Hiring manager and recruiter should collaborate to create the relevant verbiage.